Privacy Policy

Effective: August 13, 2026

This page explains what information College Wrecks Your Sleep collects, why, and what happens to it. We’ve written it in plain English instead of legalese — if anything here is unclear, email support@collegewrecksyoursleep.com and we’ll answer.

What we collect

Depending on how you interact with College Wrecks Your Sleep, we collect:

• Purchaser information. If you buy the $99 program, our payment processor (Stripe) shares your name, email, and purchase record with us so we can send you your redemption code.
• Account information. When she redeems her code at /register, we collect the email address and password she sets up to create her account. Her password is hashed — we never see or store it in plain text.
• Student registration information. If she also opts in to the text program with her own number, we additionally collect the mobile number she provides and her consent record (timestamp, IP address, and the exact opt-in language she was shown).
• Assessment responses. If a student uses one of the linked tools (the Sleep Routine Builder, Caffeine Calculator, or Sleep Debt Calculator), those responses are collected by collegesleepscore.org under its own privacy policy — not by this site.
• Contact and support messages. If you email us, we keep that correspondence to respond to you.
• Advertising and device data on public pages. Our public marketing pages, blog pages, and checkout page — never the program itself — carry advertising cookies from Meta and Google. These collect which of those pages you visit, your browser and device type, and a cookie identifier. The Advertising section below covers exactly what this means and how to opt out.
• How our public pages are used. On our public pages we record how visitors move through them — for example, roughly how long someone stays, how far down a page they read, and which links they follow. Where a visit came from an ad, we also record which one. This is measured in ranges rather than exact values, isn’t tied to your name or email, and doesn’t follow you to other websites.

Why we collect it

• To deliver what you paid for. Your purchase record and redemption code let us confirm access and send the program.
• To run the text program. A student’s number and consent record are what let us legally send the messages she signed up for, and what let us stop the moment she asks.
• To send you the newsletter, if you or the student opted in to it.
• To see what’s working on our own pages. Knowing which pages people read and which they leave straight away is how we decide what to fix. We look at this in aggregate — no individual visit is of interest to us.

Who we share it with

We use a small number of trusted services to operate this site. They receive the minimum data needed to do their job, and they act on our instructions — they are service providers, not third parties receiving your data for their own use. They cannot use it for anything except the job we hired them for.

• Stripe — our payment processor. Handles your card details directly; we never see or store full card numbers.
• Supabase — our database provider. Stores purchase, registration, and consent records securely.
• Vercel — our hosting provider. Serves the website you’re reading right now, and provides the aggregate measurement described above.
• Klaviyo — our email and text messaging service. Sends the messages this program consists of.
• ImprovMX — our email forwarding service. Routes mail sent to our addresses (like the one in this policy) to a personal inbox.

Telling the purchaser you finished

The person who bought your registration code hears nothing about your account after you redeem it — not your answers, not your score, not whether you have opened anything. There is one exception, and only you can create it. When you finish the final assessment we ask whether you would like us to tell them you finished. If you say yes, we send them that single fact. Not your score, not your answers, and nothing afterwards. If you say no, or ignore it, we send nothing and they are not told that you declined.

We keep a record of that choice when you make it — the date, your IP address, and the exact wording you agreed to — for the same reason we keep one for text messaging consent. A sent message cannot be recalled, so this is offered once, at the end, and never turned on by default.

Advertising

We advertise the program on Meta (Facebook and Instagram) and Google. To measure whether those ads work — and to reach people who visited but didn’t buy — our public marketing pages, blog pages, and checkout page include Meta’s pixel and Google’s tag. When you visit those pages, Meta and Google receive the page you viewed, your browser and device information, and a cookie identifier. If a purchase happens, we report it back to both so they can tell which ad led to it; Meta also receives a hashed (unreadable) version of the purchaser’s email for that matching. Meta and Google use this data under their own privacy policies, not ours.

Three lines we hold:

• Nothing inside the program is tracked for advertising. The hacks, tools, tests, account pages, registration, and login carry no advertising code at all.
• Advertisers never receive program data. No enrollment records, no phone numbers, no message history, nothing a student does after registering.
• You can opt out. An ad blocker or your browser’s cookie controls stop these trackers completely. You can also limit how the platforms use ad data at Meta Ad Preferences and Google Ad Settings, or email us and we’ll help.

We do not sell your data — nobody pays us for it, ever. The advertising above is the one case where data about you leaves this site for another company’s use; it runs only on the public pages, and you can opt out of it. Beyond that, we share data only with the service providers listed above, and we do not allow other companies to use it for their own marketing.

How long we keep it

We keep purchase and registration records for as long as needed to operate the program and to satisfy the record-keeping that a defensible consent record requires. If you want your data deleted, see the section below.

Your rights

You can do any of the following at any time by emailing support@collegewrecksyoursleep.com:

• Ask what we have about you. We’ll send you a copy within 30 days.
• Ask us to delete your data. We’ll delete your record within 30 days, including from backups, and notify our processors to do the same. This ends message delivery immediately.
• Ask us to correct something. If something we have is wrong, we’ll fix it.
• Stop text messages. Reply STOP to any message, any time. See our SMS Terms.
• Unsubscribe from email. Use the unsubscribe link in any email, or email us directly.

If you’re a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of personal information we collect, the right to delete personal information, and the right to opt out of the “sale” or “sharing” of personal information. We don’t sell data. The advertising cookies described above do count as “sharing” under California’s definition, and the Advertising section explains how to opt out — or email us and we’ll walk you through it.

Age requirement

Creating an account at /register, and registering a phone number for the text program, is for people 18 and over — we ask before either one. A student registers herself; nobody else can create her account or enroll her number. Our blog and product pages are open to everyone and don’t require an account.

If you believe someone under 18 has registered an account or a number through this program, email support@collegewrecksyoursleep.com and we will remove it promptly.

Security

We take reasonable steps to protect the information you provide — encryption in transit (the website runs on HTTPS), encryption at rest, and limited internal access to the data. That said, no system is perfectly secure. If we learn of a breach affecting your data, we will notify you and take steps to limit harm.

Changes to this policy

If we change anything material in this policy, we’ll update the effective date at the top of this page and, if the change is significant, notify users by email where we have one on file.

How to reach us

For any privacy question, or to exercise any right above: support@collegewrecksyoursleep.com